Privacy Policy
We want buying a carpet from Carpet Unique to feel clear and trustworthy. This Privacy Policy explains what information we need, why we need it, who helps us process it, and what choices and rights you have.
Information we need
If you browse the shop, we use basic technical data needed to show the site securely. If you create an account, contact us, or place an order, we may use your name, email address, phone number, billing and delivery address, order details, payment status, shipping information, messages, consent choices, and security logs.
Why we use your information
We use your information to keep your account available, answer questions, reserve and sell one-of-a-kind carpets, process payment, prepare shipping, send order updates, prevent fraud, secure the shop, handle returns or complaints, and meet tax and accounting duties. Depending on the situation, the legal basis is contract performance, legal obligation, legitimate interest, or consent.
Payment, shipping, and service providers
We only share what is necessary with trusted service providers: banks for payments, shipping carriers such as DHL, GLS, UPS, or FedEx, hosting providers, email services, and technical support providers. These providers receive the information they need to complete their task, not more.
Cookies and consent
Necessary cookies make the shop work: cart, checkout, login, fraud prevention, security, and remembering privacy choices. We do not currently use optional analytics or marketing cookies. If that changes, we will ask separately before activating them.
Retention
We keep order and invoice records for the legally required period. Account, enquiry, shipping, and technical data is kept only as long as needed for customer service, security, legal defence, or statutory duties.
Transferencias fuera del EEE
Algunos proveedores internacionales de transporte o TI pueden tratar datos fuera del Espacio Económico Europeo. Estas transferencias se basan en una decisión de adecuación, garantías como las cláusulas contractuales tipo de la UE o una excepción legal.
Seguridad e información obligatoria
Aplicamos medidas técnicas y organizativas adecuadas, como cifrado TLS, controles de acceso, actualizaciones y copias de seguridad. Los campos obligatorios de la cuenta y del pedido son necesarios para el contrato; sin ellos no podemos tramitar el pedido. Actualmente no tomamos decisiones exclusivamente automatizadas con efectos jurídicos o similares.
Visiting the shop and server logs
When you visit the shop, our hosting provider processes technical data sent by your browser, including IP address, time, requested page, status code, data volume, referrer, and browser and operating-system information. This supports secure delivery, error analysis, and attack prevention and is not used for personalised advertising.
Registration, login, and password
When you register, we process your name, email address, login details, language preference, and the confirmations required to open an account. We use noreply@carpetunique.com for verification, password resets, and security notifications. You may request account deletion subject to statutory retention duties; order and invoice records may need to be retained.
Orders, payment, and invoices
For an order, we process customer details, billing and delivery address, carpet, price, shipping cost, payment method, payment status, invoice number, and order communications. For bank transfer, we process the incoming payment and its reference. Invoices and payment evidence are retained for commercial and tax obligations.
Service and order emails
We send transactional emails for registration, verification, password reset, order confirmation, bank transfer, payment, invoice, dispatch, tracking, return, and refund. These messages are required for the account, contract, or customer service and are not newsletter advertising. Customer service, orders, shipping, and returns are handled through info@carpetunique.com.